$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft File: AC555447BA62C39107F16BF572F82A417F728DBF.mft (raw, json) Hash identifier: ZPCSeaklT3s1/04z6IVGjxR/yaAp9zayZyeMelHoi+c= Subject key identifier: 11:7E:59:04:E7:00:F9:35:DB:2C:A6:56:3F:36:0D:D7:3A:CC:F6:79 Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF Certificate serial: 1FAFE68802323FDF37A462B1A396022831BFAE07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft Manifest number: 05FB Signing time: Mon 02 Jun 2025 23:42:20 +0000 Manifest this update: Mon 02 Jun 2025 23:37:20 +0000 Manifest next update: Fri 06 Jun 2025 06:59:20 +0000 Files and hashes: 1: AS38482.roa (hash: 12/Au5ktDjPZHc9Iz0qq8PY1HbxHsUIh8x0RMTJueEA=) 2: AS17451.roa (hash: 8mqBukE5xGf+ZSQIE59+SBy7vlxOZzSCYXdVkEMjGps=) 3: AC555447BA62C39107F16BF572F82A417F728DBF.crl (hash: Zt2TGN3A2t2154Sm7nMiFp0vDWE7X15n+p8yss05ufA=) 4: AS38060.roa (hash: sCJYA9RzvhULZFKF2+8vUSPmeWwAql+rDCs/syocduA=) 5: AS45493.roa (hash: mb0AgCXbkScEv7HGYPRCGM6VDPWZb0xWmZOIeGOHRDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 06:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:af:e6:88:02:32:3f:df:37:a4:62:b1:a3:96:02:28:31:bf:ae:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF Validity Not Before: Jun 2 23:37:20 2025 GMT Not After : Jun 6 06:59:20 2025 GMT Subject: CN=117E5904E700F935DB2CA6563F360DD73ACCF679 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5b:bb:97:9b:13:bf:f0:cb:7c:6e:62:05:03: af:63:29:78:4b:7a:65:1d:ac:d8:b2:39:24:2b:5a: 92:90:bb:54:99:2c:24:cc:9b:2f:0d:78:a1:14:bd: 28:69:ba:ef:16:0e:a2:02:29:d3:c0:12:19:ac:11: d0:19:17:aa:74:44:7a:2b:00:e9:eb:5c:ef:ff:bc: b2:78:11:d4:b7:f3:68:d2:c8:aa:ec:45:82:af:b1: ab:40:27:45:a6:26:e9:8b:24:c7:02:77:eb:36:b3: 5e:d8:14:32:60:08:5c:e4:fc:2c:da:c6:05:cf:37: 18:d3:3c:8e:ac:0c:9b:b6:bb:4d:5c:00:b4:fb:bc: c5:b0:d7:64:7d:84:24:02:36:90:58:1f:5a:ca:6e: 4d:db:e2:d1:b4:b2:9a:76:d8:cb:12:60:2d:25:b4: fd:94:b3:a8:2c:3a:09:72:8e:91:00:1f:42:71:2c: e5:f6:5a:a9:7a:cd:a8:6c:76:c4:d7:71:14:01:74: cc:a0:ed:50:ee:6d:f1:80:2d:9a:f0:d3:e6:3a:68: bb:41:7a:32:da:e7:f7:94:45:b8:4c:3a:76:ed:03: 90:10:73:cb:90:67:89:6d:e6:b8:fb:a5:9d:6a:e0: 07:f5:15:fa:73:bd:6b:c3:ee:2f:9f:52:d9:43:94: 31:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:7E:59:04:E7:00:F9:35:DB:2C:A6:56:3F:36:0D:D7:3A:CC:F6:79 X509v3 Authority Key Identifier: keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:07:c3:d1:e4:b2:ff:90:b6:a0:5d:b0:de:ef:5f:19:ad:3c: 42:86:b3:80:f3:48:5c:43:79:2e:c5:29:03:63:b8:e6:77:a0: 9c:9c:48:93:e9:40:81:ac:42:9a:71:c4:82:ff:c3:d2:4b:5e: b6:96:de:ec:e4:e8:0a:94:2d:6a:14:02:e5:e3:a9:17:53:5c: 9d:b9:08:51:8e:bd:9d:e8:34:0f:60:73:23:67:a6:3b:c6:a9: 95:d5:a5:5f:4f:41:91:d2:5d:c2:5a:1a:40:4e:6a:3d:f2:88: 83:8c:0e:59:07:47:2d:52:80:cc:16:8c:79:70:5e:35:a9:b7: ee:e6:7b:3c:88:de:6a:e8:30:a1:e6:4f:bd:a7:79:27:1c:18: 5b:1d:33:0b:44:4f:0a:af:1b:af:92:0f:1f:04:40:1b:b9:22: 7e:5c:94:bb:20:d4:0f:63:0a:7e:e6:8a:be:25:5a:37:12:e4: 61:ac:1f:56:fc:cb:ee:c3:44:e8:68:eb:97:2e:9c:98:f1:2c: d3:9d:f6:c9:50:14:31:33:d6:37:bd:f6:c9:42:78:37:28:93: 97:54:f7:46:25:24:2e:a2:b1:10:30:19:87:d8:97:cc:56:df: 74:16:dc:40:5d:1b:12:eb:d7:ab:b0:d6:c6:93:93:c6:f3:e4: 76:ad:6c:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6/miAIyP983pGKxo5YCKDG/rgcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3 RjcyOERCRjAeFw0yNTA2MDIyMzM3MjBaFw0yNTA2MDYwNjU5MjBaMDMxMTAvBgNV BAMTKDExN0U1OTA0RTcwMEY5MzVEQjJDQTY1NjNGMzYwREQ3M0FDQ0Y2NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTW7uXmxO/8Mt8bmIFA69jKXhL emUdrNiyOSQrWpKQu1SZLCTMmy8NeKEUvShpuu8WDqICKdPAEhmsEdAZF6p0RHor AOnrXO//vLJ4EdS382jSyKrsRYKvsatAJ0WmJumLJMcCd+s2s17YFDJgCFzk/Cza xgXPNxjTPI6sDJu2u01cALT7vMWw12R9hCQCNpBYH1rKbk3b4tG0spp22MsSYC0l tP2Us6gsOglyjpEAH0JxLOX2Wql6zahsdsTXcRQBdMyg7VDubfGALZrw0+Y6aLtB ejLa5/eURbhMOnbtA5AQc8uQZ4lt5rj7pZ1q4Af1FfpzvWvD7i+fUtlDlDFFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEX5ZBOcA+TXbLKZWPzYN1zrM9nkwHwYDVR0j BBgwFoAUrFVUR7piw5EH8Wv1cvgqQX9yjb8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC9BQzU1NTQ0N0JB NjJDMzkxMDdGMTZCRjU3MkY4MkE0MTdGNzI4REJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3Rjcy OERCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB NDE3RjcyOERCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQHw9Hksv+QtqBdsN7vXxmtPEKGs4DzSFxD eS7FKQNjuOZ3oJycSJPpQIGsQppxxIL/w9JLXraW3uzk6AqULWoUAuXjqRdTXJ25 CFGOvZ3oNA9gcyNnpjvGqZXVpV9PQZHSXcJaGkBOaj3yiIOMDlkHRy1SgMwWjHlw XjWpt+7mezyI3mroMKHmT72neSccGFsdMwtETwqvG6+SDx8EQBu5In5clLsg1A9j Cn7mir4lWjcS5GGsH1b8y+7DROho65cunJjxLNOd9slQFDEz1je99slCeDcok5dU 90YlJC6isRAwGYfYl8xW33QW3EBdGxLr16uw1saTk8bz5HatbDw= -----END CERTIFICATE-----Generated at Wed Jun 4 00:15:24 2025 by rpki-client